@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +10 more potentially affected by CVE-2026-33768 +1 more via @astrojs/vercel (>=10.0.6, <=10.0.8)

@astrojs/vercel NPM version =10.0.6, =0.0.3, =0.2.0, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.0.11, =0.3.0 - taskair 0.0.1 Source cves: CVE-2026-33768, CVE-2026-73424 Source advisory: GHSA-X27W-589X-FRM2...

@ayco/cozy (0.2.4), @bobdivx/mf3d (>=1.0.2, <=1.0.3) +27 more potentially affected by CVE-2026-33768 via @astrojs/vercel (>=3.8.2, <=9.0.5)

@astrojs/vercel NPM version =3.8.2, =1.0.2, =0.1.2, =0.0.1, =1.7.0, =0.10.4, =0.2.1, =0.0.5, =2.4.0, =1.0.2, =0.0.3, =0.0.36 and more Source cves: CVE-2026-33768 Source advisory: MEND:CVE-2026-33768...

CVE-2026-33768

Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and xastropath query parameter to rewrite the internal request path, with no authentication whatsoever. On deployments without Edge Middleware, this lets anyone bypass Vercel...

CVE-2026-33768

creationtimestamp| type| source ---|---|--- 2026-03-24 18:12:25+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-mr6q-rp88-fx84...